The Briefing

Plain-English writing on
cryptographic risk.

CMMC, post-quantum cryptography, and the compliance landscape — written for the people who have to act on it, not just admire the math.

CMMCJune 15, 2026· 4 min

What CMMC Actually Requires for Cryptographic Compliance

Most contractors know CMMC has 110 controls. Far fewer know which of them are about encryption — or that those are the ones auditors scrutinize hardest.

Read article

Post-QuantumMay 28, 2026· 4 min

Why RSA-2048 Isn't Quantum-Safe (and What Replaces It)

RSA-2048 protects most of the internet today. Here's why a sufficiently capable quantum computer breaks it — and what NIST has standardized to replace it.

Read article

Threat IntelMay 10, 2026· 3 min

Harvest Now, Decrypt Later: The Attack That's Already Happening

You can't detect it, it costs the attacker almost nothing, and the damage is retroactive. HNDL is the reason quantum risk is a today problem.

Read article

Plain-English writing oncryptographic risk.

What CMMC Actually Requires for Cryptographic Compliance

Why RSA-2048 Isn't Quantum-Safe (and What Replaces It)

Harvest Now, Decrypt Later: The Attack That's Already Happening

Plain-English writing on
cryptographic risk.